This has been happening for a week since my PC had been infected with a virus. I installed avast which captured a few viruses & trojans but this is still happening. Specifically, when I do a google or yahoo search and click a link from the search, it takes me to different websites. Anyone ever experience this? Any recommendations? Avast has not found any other viruses, not sure whats causing this. Thanks.

We didn't detect any active process of a firewall on your system. Reasons maybe:(1.) You are using the windows firewall or a hardware firewall.(2.) You are using a firewall of an unknown vendor.(3.) You are using a firewall, but for unknown reasons it is disabled(4.) You don't use any firewall at all.We recommend you to use a firewall.

O4 - HKUS\S-1-5-21-1219393502-2404566984-3178860527-1006\..\Run: [ares ultra] "C:\Program Files\Ares Ultra\Ares Ultra.exe" -h (User 'Sarah')While this entry itself is not bad, this is a possible infection point as are all P2P programs.

Since your HijackThis log shows you have Spybot ( you did NOT mention IF you have run their program !? ), I recommend you ask their experienced, certified, Volunteer "Malware Removal Specialists" for help on their Support Forums at http://forums.spybot.info .

CharleyO is right there, look here: http://www.prevx.com/filenames/X2370485212263648554-X1/ARES+ULTRA.EXE.htmlDescription: Ares Ultra.exe is located in a subfolder of "C:\Program Files". Known file sizes on Windows XP are 2,658,816 bytes (33% of all occurrence), 2,831,360 bytes, 3,780,608 bytes.There is an icon for this program on the taskbar next to the clock. The program has a visible window. Program can be uninstalled in the Control Panel. File Ares Ultra.exe is not a Windows system file. The process uses ports to connect to LAN or Internet. Ares Ultra.exe is able to record inputs, manipulate other programs. Therefore the technical security rating is 12% dangerous, however also read the users reviews.

Recommended: Identify Ares Ultra.exe related errors

Important: Some malware camouflage themselves as Ares Ultra.exe, particularly if they are located in c:\windows or c:\windows\system32 folder. Thus check the Ares Ultra.exe process on your pc whether it is pest. Update the file to virustotal.com and give us the results as an attached txt file,

P2P although it might be partly legit is a protocol that is frowned upon by certain BigMedia parties, that to say it politely are not too amused about these online download activities and will try to frustrate it, so it can be a source of malcode, so if you are into that take utmost care not to get infested with malicious software.

polonus

Logged

Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!